$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft File: 9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json) Hash identifier: niTxJjl7rftPwpoF17jZ6sYDk/mVUOd57iYiqwGdacA= Subject key identifier: 52:F0:AC:89:35:E9:A7:CC:DE:58:53:E6:06:6F:8D:D4:04:17:BC:BB Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Certificate serial: 04F1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft Manifest number: 04EA Signing time: Tue 04 Nov 2025 17:27:06 +0000 Manifest this update: Tue 04 Nov 2025 17:27:06 +0000 Manifest next update: Tue 11 Nov 2025 17:27:06 +0000 Files and hashes: 1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: 8sNQsOPO8RAPkYtwCuWXYmczgBRiw/4lp7OS+vKt0yM=) 2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: 7V54SxSgQ+SNaGeYZDWb9OGgqMLMcejVc584VWscbyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1265 (0x4f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Validity Not Before: Nov 4 17:27:06 2025 GMT Not After : Nov 11 17:27:06 2025 GMT Subject: CN=690a376a-4962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:9f:5f:c8:ba:e3:e4:af:25:04:85:56:53: a8:39:5b:55:cc:68:20:09:84:a0:7b:e2:5a:82:b7: ef:ec:c8:29:26:86:0e:76:90:bb:7a:df:87:be:99: 27:d7:7e:12:09:24:24:b6:4d:77:09:ec:c1:9b:3a: 83:c3:9c:35:82:f1:64:d8:6e:2a:09:0c:68:1b:20: 4f:49:e2:c7:94:5a:83:8f:ae:95:67:9b:e9:0e:58: f5:bc:24:b2:ef:71:f4:5f:43:35:2a:c2:13:f2:c0: 5d:26:f3:c3:59:16:f3:cd:7c:11:7c:3b:b3:c4:a9: b8:7b:fe:0c:6a:e4:98:3c:61:dd:80:68:cf:29:a9: 3a:9a:1d:5c:89:3b:00:b3:73:da:cf:73:dd:f9:85: c0:4c:95:c7:b7:d1:59:ae:85:61:86:2d:b9:63:db: 43:9b:bf:44:ce:56:f4:4c:71:7d:66:dc:c5:5c:69: 53:62:56:b3:d6:c6:88:ca:a3:b0:fe:30:eb:a6:74: d9:3e:84:b5:f8:82:2c:1f:5f:3e:a4:30:59:74:bf: 42:4c:4c:d2:9b:83:d0:be:7d:7e:60:73:d6:58:c5: 2c:73:53:d2:33:15:c1:77:e6:57:9f:6f:a3:6d:1d: 0d:74:42:44:d3:27:ce:4a:00:84:f9:e8:c7:57:13: a6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F0:AC:89:35:E9:A7:CC:DE:58:53:E6:06:6F:8D:D4:04:17:BC:BB X509v3 Authority Key Identifier: keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:34:80:37:ce:da:3c:e0:ed:54:42:47:77:79:12:3c:0d:6f: 35:2f:11:fe:3e:72:17:78:f6:71:81:bd:1c:6f:ad:39:a1:51: 07:cd:49:30:3b:89:47:ed:d9:f6:07:bd:8d:a1:84:17:37:e7: 87:08:9e:72:20:ca:73:47:3a:3b:8f:c7:9d:fd:42:b1:f9:b4: 32:10:d8:fd:6e:2b:cc:bf:5f:b6:8f:18:0e:ef:2d:10:be:c3: ea:f0:59:b4:f6:06:c3:fa:d7:a1:ff:b2:54:5c:51:2d:7c:14: 70:1c:25:cc:23:18:da:e0:63:fd:9e:df:b3:e9:00:e1:db:f5: 84:d0:43:46:63:9d:9e:62:81:97:c3:5e:fa:df:db:50:e3:96: 63:c2:5e:3b:1d:93:fe:b3:e0:7f:75:d6:42:af:a4:70:54:9c: d7:f8:7c:b0:b8:12:f8:be:f8:bc:25:51:50:d5:d7:97:70:81: 4e:3f:8f:19:95:b0:fb:ff:2e:fe:26:41:f8:8a:fb:ba:fc:1d: 1e:f6:14:63:49:ac:07:e1:07:be:97:66:bb:25:28:47:ed:95: 91:47:9e:40:89:5b:c5:f0:e5:f2:e9:d9:e6:92:26:1c:41:14: 3b:b7:ed:06:b9:dc:1b:fc:e4:d3:aa:95:5a:63:63:fb:5b:e2: a3:db:a1:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKEY3RjlEOEE0MzU1RDY3M0I5RDRFN0YxNTVEM0E3OEU1 RTY2MEZFQTUwHhcNMjUxMTA0MTcyNzA2WhcNMjUxMTExMTcyNzA2WjAYMRYwFAYD VQQDEw02OTBhMzc2YS00OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rOfX8i64+SvJQSFVlOoOVtVzGggCYSge+Jagrfv7MgpJoYOdpC7et+Hvpkn 134SCSQktk13CezBmzqDw5w1gvFk2G4qCQxoGyBPSeLHlFqDj66VZ5vpDlj1vCSy 73H0X0M1KsIT8sBdJvPDWRbzzXwRfDuzxKm4e/4MauSYPGHdgGjPKak6mh1ciTsA s3Paz3Pd+YXATJXHt9FZroVhhi25Y9tDm79Ezlb0THF9ZtzFXGlTYlaz1saIyqOw /jDrpnTZPoS1+IIsH18+pDBZdL9CTEzSm4PQvn1+YHPWWMUsc1PSMxXBd+ZXn2+j bR0NdEJE0yfOSgCE+ejHVxOmIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLwrIk1 6afM3lhT5gZvjdQEF7y7MB8GA1UdIwQYMBaAFPf52KQ1XWc7nU5/FV06eOXmYP6l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMTYyRTAzQTNE M0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6dWRUbjhWWFRwNDVlWmdf cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlfbllwRFZkWnp1ZFRuOFZYVHA0NWVaZ19xVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMTYyRTAzQTNEM0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6 dWRUbjhWWFRwNDVlWmdfcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMNIA3zto84O1UQkd3eRI8DW81LxH+PnIXePZxgb0cb605oVEHzUkw O4lH7dn2B72NoYQXN+eHCJ5yIMpzRzo7j8ed/UKx+bQyENj9bivMv1+2jxgO7y0Q vsPq8Fm09gbD+teh/7JUXFEtfBRwHCXMIxja4GP9nt+z6QDh2/WE0ENGY52eYoGX w17639tQ45Zjwl47HZP+s+B/ddZCr6RwVJzX+HywuBL4vvi8JVFQ1deXcIFOP48Z lbD7/y7+JkH4ivu6/B0e9hRjSawH4Qe+l2a7JShH7ZWRR55AiVvF8OXy6dnmkiYc QRQ7t+0Gudwb/OTTqpVaY2P7W+Kj26Hb -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:14 2025 by rpki-client